Add a testcase for network protocols that the log parsing library can't

parse.
This commit is contained in:
Steve Beattie 2007-09-17 21:20:24 +00:00
parent 9ad53af32b
commit cf76182f2c
3 changed files with 11 additions and 0 deletions

View file

@ -0,0 +1 @@
type=APPARMOR_DENIED msg=audit(1190503205.837:27088): type=1503 operation="socket_create" family="packet" sock_type="raw" protocol=768 pid=16196 profile="/home/steve/aa-regression-tests/changehat_wrapper//net_raw"

View file

@ -0,0 +1,10 @@
START
File: test_multi/testcase24.in
Event type: AA_RECORD_DENIED
Audit ID: 1190503205.837:27088
Operation: socket_create
Network family: packet
Socket type: raw
Protocol: 768
Epoch: 1190503205
Audit subid: 27088